Question

-Prepare a list of Hardware and Software Pre-requisites for the server installation

-Complete the server installation – Explain the role of the server in the network

-Define a password policy for Administrator account

Answer 1

`Hey,

Note: Brother if you have any queries related the answer please do comment. I would be very happy to resolve all your queries.

The function of a computer server is to store, retrieve and send computer files and data to other computers on a network. Many businesses use a local network to connect a number of computers. On a larger scale, the worldwide computer network known as the Internet depends on a large number of servers located around the world. The files, data and functionality of a given website is based on servers.

Servers have more processing power, memory and storage than their client computers. The client is the computer that is not acting as the server and is requesting information from the server. When computers are connected in some physical or wireless way and sharing services or information, this is referred to as a computer network. A computer network requires at least two participants, with at least one of them acting as a client and at least one acting as a server.Numerous systems use this client-server networking model, including websites and email services. An alternative model, peer-to-peer networking, enables all computers to act as either a server or a client. Hardware requirements for servers vary depending on the server applications and the number of clients. Servers run for long periods without interruption, so hardware reliability and durability are extremely important. Servers are noisy and need a stable power supply, good Internet access and increased security, so they are usually stored in a dedicated server room or center.

Require Passwords for Login - Systems shall not be configured to allow user login without a password. Exceptions shall be granted for specialized devices such as public access kiosks when these devices are configured with public user accounts that have extremely restricted permissions (e.g. web only) that are separate from administrative accounts.

Protect Against Password Hacking - System administrators shall harden their systems to deter password cracking by using reasonable methods to mitigate “brute force” password attacks. For example, some systems will lock an account for a few minutes after several failed login attempts, or detect where the attack is coming from and block further attempts from that location, or at minimum alert an alert in real-time that an attack is underway so that manual action can be taken.

Logging - Practicable measures shall be put in place to log successful and failed login attempts.

Changing Password after Compromise or Disclosure - System administrators shall, in a timely manner, reset passwords for user accounts or require users to reset their own passwords in situations where continued use of a password creates risk of unauthorized access to the computing account or resource. Examples of these situations include but are not limited to: disclosure of a password to an unauthorized person; discovery of a password by unauthorized person; system compromise (unauthorized access to a system or account); insecure transmission of a password; replacing the user of an account with another individual requiring access to the same account; password is provided to IT support staff in order to resolve a technical issue; account password is communicated to a user by the system administrator.

Default Passwords - System administrators shall not use default passwords for administrative accounts.

Kindly revert for any queries

Thanks.